-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Feb 2024 21:00:13 +0100 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: arm64 Version: 1.17.1-2+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-02) Changed-By: Salvatore Bonaccorso Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1063845 Changes: unbound (1.17.1-2+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Address DNSSEC protocol vulnerabilities (Closes: #1063845) - Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers. - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU. Checksums-Sha1: 85200257a1e82ba31259b7882e3918d20717d00e 618316 libunbound-dev_1.17.1-2+deb12u2_arm64.deb 99dbf0baf9fb4e1fd2b8c490cc54360a50464327 1245152 libunbound8-dbgsym_1.17.1-2+deb12u2_arm64.deb 1815c7ea1a9aeb29afed9f1d67c5ab98f391491d 508604 libunbound8_1.17.1-2+deb12u2_arm64.deb 603d8bb52dfe886bbbeb69006b7271afd8b99ed4 172632 python3-unbound-dbgsym_1.17.1-2+deb12u2_arm64.deb 7cd32be74a7ff929d87aae683552876ea621de01 200992 python3-unbound_1.17.1-2+deb12u2_arm64.deb 745512310863a850d75f629c9b81e1b47126fea2 59324 unbound-anchor-dbgsym_1.17.1-2+deb12u2_arm64.deb ea35fd1ed611d403fe5e7d5ba3c4fa957bc5fb0a 178088 unbound-anchor_1.17.1-2+deb12u2_arm64.deb 6b1a0ff66888313179dd0c8e2312dcdc76740c8f 5010520 unbound-dbgsym_1.17.1-2+deb12u2_arm64.deb 4f36b1f21aaa44f3ccad8fdca509f768bed12170 130364 unbound-host-dbgsym_1.17.1-2+deb12u2_arm64.deb 2b01cf778c1eec18655ac133d34e65675f80bd7b 198188 unbound-host_1.17.1-2+deb12u2_arm64.deb d2d213d6d81e57869e5a3cbe073d718dca9293b5 10608 unbound_1.17.1-2+deb12u2_arm64-buildd.buildinfo 25d630df73a7d143afe9427dc0137855f3c30de5 884312 unbound_1.17.1-2+deb12u2_arm64.deb Checksums-Sha256: 2f965a3e5df25db16456afbe9f89f86a4b9a016f7317e441ef5244aa1cfed471 618316 libunbound-dev_1.17.1-2+deb12u2_arm64.deb 7a7e46aea9b7fa6bd242663fe03096619648b1bd7a562b63d6dd1703a1f09ccd 1245152 libunbound8-dbgsym_1.17.1-2+deb12u2_arm64.deb 7f684ad1aeceeb299ef3e8ab9701a15b1a6aaf03b18049ee007a8c29b1de09e6 508604 libunbound8_1.17.1-2+deb12u2_arm64.deb 81bc9337a72fe844d7cb1b9aec1f113bda6b532d8b87416998cdb9e3e31f092f 172632 python3-unbound-dbgsym_1.17.1-2+deb12u2_arm64.deb df9b0c930b56cf51a1887d33cdc84c5d5d39a85bf273a062e5975ad8cd24f31f 200992 python3-unbound_1.17.1-2+deb12u2_arm64.deb 90b07d31decd339838b4b912f1ef2a8f4be617f276da4e6476e030d088abbe69 59324 unbound-anchor-dbgsym_1.17.1-2+deb12u2_arm64.deb 56e11fc93a0ca7e9b4fb92fa22275c70715b6a89716585c175b683cc26eb45d3 178088 unbound-anchor_1.17.1-2+deb12u2_arm64.deb 2601fd259cd13bac4a45b666f60deb5123da184bd07d560c687d502bd7c92cde 5010520 unbound-dbgsym_1.17.1-2+deb12u2_arm64.deb 8abe027c661b2e22a3ad788542b6e4c9b38cd0be8a46b125a3e035df903a72bd 130364 unbound-host-dbgsym_1.17.1-2+deb12u2_arm64.deb 5b8d9967057a88cfe9052149ebd708ad11a5e6cba25b68b7df286fad59ff5733 198188 unbound-host_1.17.1-2+deb12u2_arm64.deb 4ca9d705d5ee74dce82c07875676ab791c6ad6ada5d5340eb67fe9312ec7d17c 10608 unbound_1.17.1-2+deb12u2_arm64-buildd.buildinfo d2ef545c809cc9b227b85e604bae511685349809076c603a867e3035e2e647d7 884312 unbound_1.17.1-2+deb12u2_arm64.deb Files: b738b68ffb05a9efbb1bd40db02d45dc 618316 libdevel optional libunbound-dev_1.17.1-2+deb12u2_arm64.deb 780c09b20e6043fe23b3cdfd75681f7a 1245152 debug optional libunbound8-dbgsym_1.17.1-2+deb12u2_arm64.deb 04b40f9faf0992ecd09474b9faa4bb95 508604 libs optional libunbound8_1.17.1-2+deb12u2_arm64.deb 59c0bdb9fd5524eaa7e68218cc1aa212 172632 debug optional python3-unbound-dbgsym_1.17.1-2+deb12u2_arm64.deb 788ea17c235ffea918f2d077a8da5424 200992 python optional python3-unbound_1.17.1-2+deb12u2_arm64.deb 267ed489fdf0b678f4b2e1ea6c09a695 59324 debug optional unbound-anchor-dbgsym_1.17.1-2+deb12u2_arm64.deb fb59e3659721d8c1467013c01e25c4e2 178088 net optional unbound-anchor_1.17.1-2+deb12u2_arm64.deb 6bfcdb6459911c9482ac92ba2b8f2b63 5010520 debug optional unbound-dbgsym_1.17.1-2+deb12u2_arm64.deb 27aaca9885ca26917a2bb8ddbeba6ac9 130364 debug optional unbound-host-dbgsym_1.17.1-2+deb12u2_arm64.deb 7b0a01e62cc862f47ffd22805f70c296 198188 net optional unbound-host_1.17.1-2+deb12u2_arm64.deb e045fb9e8ba0e49d7467407d7276cf5a 10608 net optional unbound_1.17.1-2+deb12u2_arm64-buildd.buildinfo e75cbff387fac58b1f5f2b80ee1a2157 884312 net optional unbound_1.17.1-2+deb12u2_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEuIolmszDbgxUhBbrMZO3llZhjs8FAmXL0ekACgkQMZO3llZh js81+A//YtWjI1z3mm1+w1WuY3ho9DsP6N9aLNssn9EWsBKP+Tl5wbjaRln7q3RF ax9Ve05Ij2+A8lXj+a/CpfKWS1pMJu0rqU+EuefelWw5E/kqT5k1U3x+8ooo4t4B 7b6cxQW1JMfsg9hMNcr9WFgxtDXHC472DIXhLUvFgXjljDW6G38l0qZO1UqRNuxn 3IhOh0ghjtsa3aNEFctVmiqZntXa+qZipRR2ICoIxSMddImFQYmiSJUDWeu7dFit OXtadrHMFHBIFz8PCMloR0uERJbrRhTMrxJ0gCP0OAse4PvcR+g6pbCOkUse1spO eetoxeN/XzjrZ6vu9vWMoYLMbB1vyaX1+o6b9MGdgPuO+ym8T/XokYJFwgrr4e1M fhVoNzQAj0/aLVIV5PTTNX8KJdzwuQamQczhsAwyHqMQqagB5kYH57igwGdxFAb4 vU9ivtw8OkOBbQ7NYtcCnyWJRkbKrkkf5TmFQ72eHhuO6G3wPGxsPDF7I1vC7Dss ajjKc4SHpqali2RaeIZ7v3gjkZXGQq14cLQG5jqyo3X99mVK23kglzjAg4VP4hBO q2UTSzjmgAxpz/e8etVcDhI3F2/h15roeGMRl1h9dFA1f+ySvEt+7mAgElZgtFMk 8WG14qvX0HR7atlmDDf8VwYrdp/QHU9DZdWjfSXP/rokZLxJ90Y= =6qrZ -----END PGP SIGNATURE-----